Privacy Policy

Information we collect

• Account data — your email address, display name, and a salted hash of your password (we never store the password itself). If you sign in with GitHub or Google, we receive your email and name from that provider.
• Documents — resumes, cover letters, and job descriptions you create or upload. These are stored so you can access them across devices.
• Usage and billing data — credit balances, feature usage, and subscription status. Payment card details are handled entirely by Stripe and never touch our servers.

How we use your information

• To provide the service: storing documents, matching resumes to job descriptions, and generating tailored content.
• To process AI features: the text of your resume and job description is sent to our AI model provider to generate results. It is not used to train models.
• To send transactional email such as verification codes (via Resend).
• To manage subscriptions and payments (via Stripe).
• To credit your account for completed surveys (via CPX Research, see below).

Third-party services

We share data only with the processors needed to run the service:

• Supabase — database hosting for accounts and documents.
• Vercel — application hosting.
• Stripe — payment processing.
• Resend — transactional email delivery.
• CPX Research— optional paid surveys on our "Earn credits" page. If you choose to take surveys, your user ID is shared with CPX Research and their own privacy policy applies to the data you provide in surveys.
• AI model provider — processes resume and job description text to generate AI results.

We do not sell your personal information.

Cookies

We use a single essential session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Data retention and deletion

Your data is kept while your account is active. You can delete your account at any time from Account settings, which permanently removes your account and documents. You can also email us to request deletion.

Security

Passwords are hashed with scrypt, sessions are stored as hashed tokens, and all traffic is encrypted with TLS. No method of storage is 100% secure, but we work to protect your data with industry-standard measures.

Children

JDMatcher is not directed at children under 16 and we do not knowingly collect their data.

Changes and contact

We may update this policy and will change the date above when we do. Questions or requests: support@resumejdmatcher.com.